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Abstract — This paper presents two new results on multiple- 
input multiple-output (MIMO) Gaussian broadcast channels 
with confidential messages. First, the problem of the MIMO 
Gaussian wiretap channel is revisited. A matrix characterization 
of the capacity-equivocation region is provided, which extends the 
previous result on the secrecy capacity of the MIMO Gaussian 
wiretap channel to the general, possibly imperfect secrecy setting. 
Next, the problem of MIMO Gaussian broadcast channels with 
two receivers and three independent messages: a common mes- 
sage intended for both receivers, and two confidential messages 
each intended for one of the receivers but needing to be kept 
asymptotically perfectly secret from the other, is considered. 
A precise characterization of the capacity region is provided, 
generalizing the previous results which considered only two out 
of three possible messages. 

Index Terms — Multiple-input multiple-output (MIMO) com- 
munication, wiretap channel, capacity-equivocation region, 
broadcast channel, confidential message 



L Introduction 

Information-theoretic security has been a very active area 
of research recently. (See |[T1 and 121 for overviews of re- 
cent progress in this field.) In particular, significant progress 
has been made in understanding the fundamental limits of 
multiple-input multiple-output (MIMO) secret communication. 
More specifically, the secrecy capacity of the MIMO Gaussian 
wiretap channel was characterized in [Sl-IlT]. The works i8j 
and 121 considered the problem of MIMO Gaussian broadcast 
channels with two confidential messages, each intended for 
one receiver but needing to be kept asymptotically perfectly 
secret from the other, and provided a precise characterization 
of the capacity region. The capacity region of the MIMO Gaus- 
sian broadcast channel with two receivers and two independent 
messages, a common message intended for both receivers and 
a confidential message intended for one of the receivers but 
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needing to be kept asymptotically perfectly secret from the 
other, was characterized in [ 10,] . 

This paper presents two new results on MIMO Gaussian 
broadcast channels with confidential message^ 

1) The problem of the MIMO Gaussian wiretap channel 
is revisited. A matrix characterization of the capacity- 
equivocation region is provided, which extends the result 
of l6| on the secrecy capacity of the MIMO Gaussian 
wiretap channel to the general, possibly imperfect secrecy 
setting. 

2) The problem of MIMO Gaussian broadcast channels 
with two receivers and three independent messages, a 
common message intended for both receivers, and two 
mutually confidential messages each intended for one 
of the receivers but needing to be kept asymptotically 
perfectly secret from the other, is considered. A precise 
characterization of the capacity region is provided, gener- 
ahzing the results of 19) and ITOl which considered only 
two out of three possible messages. 

Notation. Vectors and matrices are written in bold letters. 
All vectors by default are column vectors. The identity ma- 
trices are denoted by I, where a subscript may be used to 
indicate the size of the matrix to avoid possible confusion. 
The transpose of a matrix A is denoted by A''", and the trace 
of a square matrix A is denoted by Tr(A). Finally, we write 
A ^ B (or, equivalently, B >^ A) whenever B — A is positive 
semidefinite. 



II. The Capacity-Equivocation Region of the 
MIMO Gaussian Wiretap Channel 

A. Channel Model 

Consider a MIMO Gaussian broadcast channel with two 
receivers, one of which is a legitimate receiver and the other 
is an eavesdropper The received signals at time index m are 
given by 

Y[m] = H,.X[m] + WrH 
Z[m] = HeX[m]+We[m] 

where and He are (real) channel matrices at the legitimate 
receiver and the eavesdropper respectively, and {Wr[m]}m 
and {We[m]}m are independent and identically distributed 
(i.i.d.) additive vector Gaussian noise processes with zero 
means and identity covariance matrices. 

' The main results of this paper were initially posted on the arXiv website 
in January 2010 II II and were subsequently reported at the 2010 IEEE 
International Symposium on Information Theory 1121 . 1131 . Similar results 
were independently reported by Ekrem and Ulukus in 1141 and 1151 . 
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(b) Simultaneous private-confidential communication 



Fig. 1. Wiretap channel. 



The transmitter has a single message W, which is uni- 
formly distributed over {1, . . . , 2"^} where R is the rate of 
communication. The goal of communication is to deliver W 
reliably to the legitimate receiver while keeping it information- 
theoretically secure from the eavesdropper. Following the 
classical work |fT6l . iflTl . for every e > it is required that 



-ff(M^|Z") >Re-e 



(2) 



for sufficiently large n, where n is the block length of commu- 
nication, Z" ;= (Z[l], . . . , Z[n]), and i?p represents the prede- 
termined level of security of message W at the eavesdropper 
known as equivocation. The capacity-equivocation region is 
the set of rate-equivocation pairs {R, Re) that can be achieved 
by any coding scheme. In the Uterature, this communication 
scenario is usually known as the rate-equivocation setting of 
the MIMO Gaussian wiretap channel; see Fig. [TJa) for an 
illustration. 

Csiszar and Korner ifTTl studied the rate-equivocation set- 
ting of a general discrete memoryless wiretap channel. A 
single-letter expression for the capacity-equivocation region 
was derived iflTl Theorem 1], which can be written as the set 
of nonnegative rate-equivocation pairs {R,Re) satisfying 



Re < mm{R,I{V;Y\U) - I{V;Z\U)} 
R < IiV;Y) 



for some p{u,v,x,y, z) = p{u)p{v\u)p{x\v)p{y, z\x). Here, 
p{y, z\x) is the transition probability of the discrete memory- 
less wiretap channel, and U and V are two auxiliary random 
variables. In theory, a computable expression for the capacity- 
equivocation region can be obtained by evaluating the single- 
letter expression (O for the MIMO Gaussian wiretap channel 
([Hi. However, such an evaluation is generally difficult due to 
the presence of the auxiliary random variables U and V. 

Several recent works |[3l-||71 studied the special case where 



the equivocation R^ is set to equal the communication rate 
R. In this case, the secrecy constraint ^ can be equivalently 
written as 

-J(M^;Z")<e (4) 
n 

i.e., message W needs to be asymptotically perfectly secure 
from the eavesdropper. Under the asymptotic perfect secrecy 
constraint dU, the maximum rate of communication is called 
the secrecy capacity. For the MIMO Gaussian wiretap channel 
([Til, a matrix characterization of the secrecy capacity was 
obtained in [Sl-lISl under an average total power constraint and 
in 161 and Q under a more general matrix power constraint. 
Similar matrix characterizations of the capacity-equivocation 
region, however, were unknown. 

B. Main Results 

The main result of this section is a matrix characterization 
of the capacity-equivocation region of the MIMO Gaussian 
wiretap channel. More specifically, consider the MIMO Gaus- 
sian wiretap channel ^ under the matrix power constraint 



1 " 

-5](XHXMm])^S 



(3) where S is a positive semidefinite matrix. Let 



C(S,HO = ilog|I + H,SH,T| 



(5) 



(6) 



be the Shannon capacity of a MIMO Gaussian point-to-point 
channel with channel matrix and under the matrix power 
constraint (|5]l, and let 



Cs(S, H,,, He 



max - log' 
o-<B-<s 2 



I + H^BHT 



I + HeBHJ 



(7) 



be the secrecy capacity of a MIMO Gaussian wiretap channel 
with legitimate receiver and eavesdropper channel matrices 
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(b) Private-confidential message capacity region 
Fig. 2. MIMO Gaussian wiretap clianne! under matrix power constraint. 



and He respectively and under the matrix power constraint Q 
IS, CI- We then have the following result. 

Theorem 1: The capacity-equivocation region of the MIMO 
Gaussian wiretap channel ([T]) under the matrix power con- 
straint ^ is given by the set of nonnegative rate-equivocation 
pairs (i?, i?e) satisfying 

i?e < min{i?,C,(S,H,,He)} 
R < C(S,H,) 

where C(S, H, ) and Cs(S, H^, He) are defined as in (|6]l and 
(Q, respectively. 

Fig. |2ta) illustrates the capacity-equivocation region of a 
MIMO Gaussian wiretap channel with channel matrices 

„ /1.8 2.0\ . „ /3.3 1.3 \ 
[l.O 3.oj ^"'^ 1^2.0 -l.b) 

(which yields a nondegraded wiretap channel) and matrix 
power constraint 

/5.0 1.25\ 
1^1.25 10.0^' 



The capacity-equivocation region of the MIMO Gaussian 
wiretap channel under an average total power constraint is 
summarized in the following corollary. The result is a direct 
consequence of Theorem [T] and fTSl Lemma 1 ] . 

Corollary 1: The capacity-equivocation region of the 
MIMO Gaussian wiretap channel ([T]i under the average total 
power constraint 

1 " 

- (X[m]TXH) < P (9) 

m— 1 

is given by the set of nonnegative rate-equivocation pairs 
(i?, Re) satisfying 

i?e < miii{i?,C7,(S,H,,He)} 
R < C(S,H,) 

for some S ^ 0, Tr(S) < P. 

C. Proof of the Main Results 

Next, we prove Theorem [T] As mentioned previously, 
directly evaluating the single-letter expression (O for the 
MIMO Gaussian wiretap channel ([T]) is difficult due to the 
presence of the auxiliary random variables. We thus resort to 
an indirect approach that connects the rate-equivocation setting 
of a MIMO Gaussian wiretap channel to the problem of simul- 
taneously communicating private and confidential messages. 

The problem of simultaneously communicating private and 
confidential messages over a discrete memoryless wiretap 
channel is illustrated in Fig. [lib). Here, the transmitter has 
a private message Wp, which is uniformly distributed over 
{1, . . . , 2"-'^p}, and a confidential message Ws, which is 
uniformly distributed over {1, . . . , 2"^= }. The confidential 
message Ws is intended for the legitimate receiver but needs to 
be kept asymptotically perfectly secret from the eavesdropper 
That is, for any e > it is required that 

-/(M^.;^")<e (11) 
n 

for sufficiently large block length n. The private message Wp 
is also intended for the legitimate receiver, but is not subject 
to any secrecy constraint. The private-confidential message 
capacity region is the set of private-confidential rate pairs 
{Rp,Rs) that can be achieved by any coding scheme. 

The following lemma provides a single-letter characteriza- 
tion of the private-confidential message capacity region of the 
discrete memoryless wiretap channel. 

Lemma 1: The private-confidential message capacity re- 
gion of the discrete memoryless wiretap channel p{y,z\x) is 
given by the set of nonnegative private-confidential rate pairs 
(Rp, Rs) satisfying 

Rs < IiV;Y\U)~I{V;Z\U) 
Rs + Rp < I{V;Y) 

for some p(u,v,x,y, z) = p{u)p{v\u)p{x\v)p{y , z\x) , where 
U and V are auxiliary random variables. 

The achievability part of the lemma can be proved by 
considering a coding scheme that combines superposition 
coding, random binning, and rate splitting. In particular, part 
of the private message will be used in the binning scheme 
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Fig. 3. MIMO Gaussian broadcast cliaiinel witli common and confidential messages. 
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to protect the confidential message against the eavesdropper. 
The converse proof follows standard information-theoretic 
argument. The details of the proof are deferred to AppendixlAl 

A simple inspection of the capacity-equivocation region 
([3]i and the private-confidential message capacity region (fTSl i 
reveals the following interesting fact: 

Fact 1: A nonnegative rate pair (i?, i?e) = {Rp + Rs, Rs) is 
an achievable rate-equivocation pair for a discrete memoryless 
wiretap channel if and only if {Rp,Rs) is an achievable 
private-confidential rate pair for the same channel. 

The "if part of the fact is easy to verify: Simply use 
the same code for both communication scenarios and view 
(WpjVFs) as the single message W for the rate-equivocation 
setting. Note that 



HiWp,Ws\Z^' 



-H{Ws\Z'') 
n 



> 

> Rs-e 
= R.-e 



Thus, the same code satisfying the secrecy constraint ( fTTl i for 
simultaneous private-confidential communication also satisfies 
the secrecy constraint (|2]) for the rate-equivocation setting. The 
"only if part of the fact comes as a mild surprise, as in the 
rate-equivocation setting which part of message is secure does 
not need to be specified a priori and may even depend on 
the realization of the channel noise. We note here that the 
above interesting fact was first mentioned in lfT9l pp. 411- 
412] without proof. 

In light of Fact [T] next we first establish a matrix charac- 
terization of the private-confidential message capacity region 
using the existing matrix characterization iSl, Qj on the 
secrecy capacity of the MIMO Gaussian wiretap channel. 
The result will then be mapped to the rate-equivocation 
setting using the aforementioned equivalence between these 
two communication scenarios. 

Lemma 2: The private-confidential message capacity region 
of the MIMO Gaussian wiretap channel ([TJ under the matrix 
power constraint (|5]l is given by the set of nonnegative private- 
confidential rate pairs {Rp,Rs) satisfying 



Rs + Rp ^ H,,) 



(13) 



Proof: Let B* be an optimal solution to the optimization 
problem on the right-hand side of (|7]i. Then, the achievability 



of the private-confidential rate region (T3[ follows from that of 
(fnt by setting V = X = U + G, where U and G denote two 
independent Gaussian vectors with zero means and covariance 
matrices S — B* and B*, respectively. 

The fact that Rg < Cs(S,H,.,He) for any achievable 
confidential rate Rg follows from the secrecy capacity result 
of JS) and Q on the MIMO Gaussian wiretap channel under a 
matrix power constraint, by ignoring the private message Wp. 
The fact that Rg+Rp < C(S, H^) for any achievable private- 
confidential rate pair {Rp,Rg) follows from the well-known 
capacity result on the MIMO Gaussian point-to-point channel 
under a matrix power constraint, by viewing {Wp,Wg) as a 
single message and ignoring the asymptotic perfect secrecy 
constraint (fTTT i on the confidential message Wg. ■ 

Remark 1: It is particularly worth mentioning the corner 
point {Rp,Rg) of the private-confidential message capacity 
region (fTSl l as given by 

{Rp, Rs) = (C(S, Hr) — Cs(S, Hr, He), Cs(S, H^, He)) . 

Here, under the matrix power constraint, both messages Wg 
and {Wp,Wg), viewed as a single private message, can 
transmit simultaneously at their respective maximum rates. In 
particular, transmitting an additional private message Wp does 
not incur any rate loss for communicating the confidential 
message Wg. 

Now, Theorem [T] follows immediately from Lemma |2] and 
a Fourier-Motzkin elimination with R = Rp + Rg and i?e = 
Rg. For comparison, the private-confidential message capacity 
region of the same MIMO Gaussian wiretap channel as used 
for Fig. Wia) is illustrated in Fig. |2tb). 



III. MIMO Gaussian Broadcast Channels with 
Common and Confidential Messages 

A. Channel Model 

Consider a two-receiver MIMO Gaussian broadcast channel. 
The transmitter is equipped with t transmit antennas, and 
receiver fc, fc = 1,2, is equipped with receive antennas. A 
discrete-time sample of the channel at time m can be written 

as 

Yfc[m] =HfcXH + ZfeH, fc = l,2 (14) 

where H^ are the (real) channel matrices of size x t, and 
{Zk[m]}m are i.i.d. additive vector Gaussian noise processes 



5 



with zero means and identity covariance matrices0 

As illustrated in Fig. [3] the transmitter has a common mes- 
sage Wq and two independent confidential messages Wi and 
W2- The common message Wo is intended for both receivers. 
The confidential message Wk is intended for receiver k but 
needs to be kept asymptotically perfectly secret from the other 
receiver Mathematically, for every e > we must have 

-/(Wi;Y.")<e and i/(M^,;Y")<e (15) 
n n 

for sufficiently large block length n. Our goal here is 
to characterize the entire capacity region C(Hi,H2,S) = 
{{Ro, Ri, R-i)} that can be achieved by any coding scheme, 
where Rq, Ri and R2 are the communication rates correspond- 
ing to the common message Wq and the confidential messages 
Wi and W2, respectively. 

With both confidential messages Wi and W2 but without 
the common message Wo, the problem was studied in [Sl for 
the multiple-input single-output (MISO) case and in |]9l for 
general MIMO case. Rather surprisingly, it was shown in fO) 
that, under a matrix power constraint both confidential mes- 
sages can be simultaneously communicated at their respected 
maximum rates. With the common message Wo and only one 
confidential message (Wi or W2), the capacity region of the 
MIMO Gaussian wiretap channel was characterized in ifTOl 
using a channel-enhancement approach ITSl and an extremal 
entropy inequality of Weingarten et al. ||2T1 . 

B. Main Results 

The main result of this section is a precise characterization 
of the capacity region of the MIMO Gaussian broadcast chan- 
nel with a more complete message set that includes a common 
message Wo and two independent confidential messages Wi 
and W2- 

Theorem 2: The capacity region C(Hi,H2,S) of the 
MIMO Gaussian broadcast channel ( fT4l i with a common mes- 
sage Wo and two confidential messages Wi and W2 under the 
matrix power constraint Q is given by the set of nonnegative 
rate triples {Ro,Ri,R2) such that 



Ro < 



lin I i log 



Ri < h\og\l 



loa 



R2 



< 



HiSH[+I^i 
Hi(S-Bo)H[+Ipi 

H2(S-Bo)Hi+I, 
n -1- HiBiHj I — 

i log + H2B1HII 

I,2+H2(S-Bo)Hj 



(16) 



log 



-Hi( 



S~Bo)HJ 



I^i+HiBiHj 

for some Bq ^ 0, Bi ^ and Bq + Bi ^ S. 

Remark 2: By setting Bo = we can recover the result of 
||9] Theorem I] that includes both confidential messages Wi 
and W2 but without the common message Wq. Similar to ||9] 
Theorem 1], for any given Bq the upper bounds on i?i and 
i?2 can be simultaneously maximized by a same Bi. In fact, 
the upper bounds on i?i and R2 in ( fTSI l are fully symmetric 

^The channel model is the same as that in Section ITl-AI However, different 
notation is used here for the convenience of presentation. 
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(a) Capacity region C(Hi,H2, S) 
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(b) (Ri , K2)-cross sections 

Fig. 4. MIMO Gaussian broadcast channel with common and confidential 
messages. 



with respect to Hi and H2, even though it is not immediately 
evident from the expressions themselves. 

Remark 3: By setting Bq = S — Bi we can recover the 
result of ifTOl Theorem 1] that includes the common message 
Wo and the confidential message Wi but without the other 
confidential message W2. 

Fig- St a) illustrates the capacity region C(Hi, H2, S) for the 
channel matrices and the matrix power constraint as given by 



H 



1 — 



and 



1.8 
1.0 

S = 



2.0^ 
3.0^ 

5.0 
1.25 



H 
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(The channel parameters are the same as those used for Fig.|2l) 
In Fig. Htb), we have also plotted the i?2)-cross section 
of C(Hi,H2,S) for several given values of Rq. Note that 
when Rq = 0, the (i?i, i?2)-cross section is rectangular, im- 
plying that under a matrix power constraint, both confidential 
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messages Wi and W2 can be simultaneously transmitted at 
their respective maximum rates |!9l. For Rq > 0, however, 
the i?2)-cross sections are generally non-rectangular as 
different boundary points on the same cross section may 
correspond to different choice of Bq. 

The capacity region under an average total power constraint 
is summarized in the following corollary. The result is a direct 
consequence of Theorem |2] and ifTSl Lemma 1 ] . 

Corollary 2: The capacity region C(Hi,H2,i-') of the 
MIMO Gaussian broadcast channel ( fT4l i with a common 
message Wq and two confidential messages Wi and W2 under 
the average total power constraint (|9]l is given by 



C(Hi,H2,P) 



y C(Hi,H2,S) 

S^O, Tr(S)<P 



(17) 



C. Proof of the Main Results 

Next, we prove Theorem |2] Following ifTSl . we shall focus 
on the canonical case in which the channel matrices Hi and 
H2 are square and invertible and the matrix power constraint 
S is strictly positive definite. In this case, multiplying both 
sides of (O by H^T^, the MIMO Gaussian broadcast channel 
(fl4] i can be equivalently written as 



Yfc [m] = Xfe [m] + Zfe [m] , fc = 1 , 2 



(18) 



where {Zfc[m]}m are i.i.d. additive vector Gaussian noise 
processes with zero means and co variance matrices = 
Similarly, the rate region (fT&t can be equivalently 



written as 



i?0 
i?2 



< 



< 



< 



min I i log 
ilog 



S+Ni 



(S-Bo)+Ni 



Bi+Ni 



N 

(S-Bo)+N 



-ilog 



B1+N2 



ilog 



2 

Bi+N 



N2 



S+N2 



(S-Bo)+N2 



(S-Bo)+Ni 



Bi+Ni 



(19) 

Next, we show that the rate region (fT9] l over all possible 
Bq )^ 0, Bi >^ and Bq + Bi < S gives the capacity region 
C(Hi,H2,S) for the canonical MIMO Gaussian broadcast 
channel ( fTSl l. Extensions to the general model (fT4l i follow from 
the well-known limiting argument ||6l, ifTOll . ifTSll and hence are 
omitted from the paper 

To prove the achievability of the rate region ( fT9] l, recall 
that the problem of a two-receiver discrete memoryless broad- 
cast channel with a common message and two confidential 
common messages was studied in ||22J . There, a single-letter 
expression for an achievable rate region was established, which 
is given by the set of rate triples (i?o, RitRi) such that 



i?o < min[/(U;Yi),/(U,Y2)] 

Ri < /(Vi;Yi|U)-/(Vi;V2,Y2|U) 

i?2 < /(V2;Y2|U)-/(V2;Vi,Yi|U) 



(20) 



where U, Vi and V2 are auxiliary random variables satisfying 
the Markov relation (U,Vi,V2) ^ X (Yi,Y2). The 
proposed coding scheme is a natural combination of double 
binning [23 1 and superposition coding. Thus, the achievability 
of the rate region ( fT9] l follows from that of (|20] i by setting 
Vi = Ui + FU2, V2 = U2, and X = U + Ui + U2 where 
U, Ui and U2 are three independent Gaussian vectors with 



zero means and covariance matrices Bq, Bi and S — Bq 
respectively, and 

F BH[(I,, + HiBHl) iRi. 



Bi 



To show that the rate region (fT9] l over all possible Bq h 0, 
Bi ^ and Bo + Bi ^ S is indeed the capacity region, we 
shall consider proof by contradiction and resort to a channel- 
enhancement argument akin to that in ifTOl . 

More specifically, assume that {rI,r\,rI) is an achievable 
rate triple that lies outside the rate region (1% for any given 
Bo ^ 0, Bi ^ and Bo + Bi ^ S. Since is 
achievable, we can bound Rq by 



Rl^ < min ( - log 



S + Ni 



Ni 



log 



No 



Dill ax 



Moreover, if r\ = R2 = 0, then Rq^^^ can be achieved by 
setting Bo = S and Bi = in Thus, by the assumption 
that (_rJ, r\, R^) is outside the rate region ( fT9] l for any given 
Bq ^ 0, Bi >^ and Bq + Bi ^ S, we can always find 
Ai > and A2 > such that 

XiR{ + X2RI ^ XiRl + \2R*2 + P (21) 

for some p > 0, where XiR* + X2R2 is given by 

max(Bn,Bi) Ai/i(Bi) + A2/2(Bo,Bi) 
subject to /o(Bo)>i?J 

Bq >r (22) 

Bi >r 

Bo + Bi ^ S. 

Here, the functions /q, /i and /2 are defined as 
/o(Bo) 



and 



.fi(Bi) 
/2(Bo,Bi) 



min I 


^log 


S + Ni 


(s- 


-Bo) 


+ 


^log 


S 


+ N2 




(s- 


Bo) 


+ N2 


} 


^log 


Bi + 


Ni 


-^log 


N 


1 


^log 


(s- 


Bo) 


+ N2 




B 


1+N2 





Bi +N2 



N2 



■log 



(S-Bo)+Ni 



Bi +Ni 



BS) 



N2 



Let (Bq,B*) be an optimal solution to the optimization 
program ( |22] |. By assumption, the matrix power constraint 
S is strictly positive definite in the canonical model. Thus, 
(Bq,B*) must satisfy the following Karush-Kuhn-Tucker 
(KKT) conditions: 

(/3i+A2)[(S-BS) + Ni]-i+/32[(S- 

= A2[(S-B*) + N2]-i 
(Ai+A2)(Bj + Ni)-i+Mi 

= (Ai+A2)(BKN2)"'+M2 (24) 
MoB^ = 0, MiB^ 0, and M2(S - BJ - B^) = (25) 

where Mo, Mi and M2 are positive semidefinite matrices, and 
/3fe, /c = 1, 2, are nonnegative real scalars such that /J^ > if 



M2 



'+Mo 
(23) 
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and only if 



It follows that 



loa 



{f3i+l32)Rl + XiRl + \2Rl 



ylog 



S + Ni 



(S-B*) + Ni 



/?2, 

ylog 



S + N2 



(S-B*)+N2 



Ai - Ids 



B^ +Ni 




Bt + N2 


) 


Ni 




N2 





A2 - Ids 



(S-B^ 



-- log 
2 ^ 



B^ + N2 
(S-B*) + Ni 



B? + Ni 



+ p. 



Next, we shall find a contradiction to 
following three steps. 



(26) 



through the 



1 ) Split each receiver into two virtual receivers: Consider 
the following canonical MIMO Gaussian broadcast channel 
with four receivers: 



Yi,[m] = X[m] + Zi,[m] 

Yi6[m] = X[m]+Zib[m] 

Y2Q[m] = X[m] + Z2a[m] 

Y26[m] = X[m]+Z2f,[m] 



(27) 



where {Zia[m]}, {Zif,[m]}, {7i2a[''n]} and {Z26[m]} are i.i.d. 
additive vector Gaussian noise processes with zero means and 
covariance matrices Ni, Ni, N2 and N2, respectively. 

Suppose that the transmitter has three independent messages 
Wo, Wi and W2, where Wq is intended for both receivers 16 
and 26, Wi is intended for receiver la but needs to be kept 
asymptotically perfectly secret from receiver 26, and W2 is 
intended for receiver 2a but needs to be kept asymptotically 
perfectly secret from receiver 16. Mathematically, for every 
e > 0, we must have 

-/(Wi;Y^J<e and -I{W2\Y^,)<e (28) 
n n 

for sufficiently large block length n. Note that receivers la 
and 16 are statistically identical to receiver 1 in channel ( flSl l, 
so are receivers 2a and 26 to receiver 2 in channel ( fTSl l. We 
thus conclude that the capacity region of channel ( |27] | is the 
same as that of channel ( fTST i under the same matrix power 
constraint. 

2) Construct an enhanced channel: Let N be a real sym- 
metric matrix satisfying 

-1 



N :^ N 



1 



Ai + A: 



-Ml 



(29) 



which implies that N ^ Ni. Since MiB{ = 0, following ifTSl 
Lemma 11] we have 

(Ai + \2){B\ + N)-i = (Ai + \2){B\ + Ni)-i + Ml 

and 

|B^ + N||Ni| = |B| +N1I |N|. (30) 



Following ( l24b . we may also obtain 

(Ai + A2)(B^ + N)-i = (Ai + A2)(B^ 

which implies that N < N2. 



N2 



M2 
(31) 



Consider the following enhanced aligned MIMO Gaussian 
broadcast channel 



YiaH 

Y2aM 
Y26H 



X[m] 
X[m] 
X[m] 
X[m] 



ZlaH 

Zib[m] 

Z2a [m] 
Z2hH 



(32) 



where {ZiQ[m]}, {Zif,[m]}, {Z2Q[m]} and {Z26[m]} are i.i.d. 
additive vector Gaussian noise processes with zero means and 
covariance matrices N, Ni, N and N2, respectively. 

The message set configuration is the same as that for 
channel (|27l). Since N ^ {Ni,N2}, we conclude that the 
capacity region of channel ( |32] | is at least as large as that of 
channel ( |27] | under the same matrix power constraint. 

Furthermore, from ( ISTT i we have 



[(S-B5)+N](Bt + N)-i 

= [(S-B*)+N2](B| 

and hence 



N2 



(S-B*)+N 



(S-B*) + N2 



Br + N2 



B^ +N 

Combining ( |23] | and dSTT i. we may obtain 

(Ai+A2)[(S-B5) + N]-i 

= (A2+A)[(S-B*) + Ni]-i 
+ (Ai+/32)[(S-B^) + N2]-M 

Substituting ( l30l l and ( l34l i into ( |26] |. we have 

(/3i+/32)i?S + Aii?I+ ^^ot 

Ni 



(33) 



(34) 



Mn 



(35) 




3} Outer bound the enhanced channel: Next, we consider a 
discrete memoryless broadcast channel with four receivers and 
three independent messages and provide a single-letter outer 
bound on the capacity region. 

Lemma 3: Consider a discrete memoryless broadcast chan- 
nel p{yia,yib,y2a,y2b\x) with four receivers and three in- 
dependent messages (Wq, Wi, W2): Wq is intended for both 
receivers 16 and 26, Wi is intended for receiver la but needs 
to be kept asymptotically perfectly secret from receiver 26, 
and W2 is intended for receiver 2a but needs to be kept 
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asymptotically perfectly secret from receiver 16. Assume that 

X ^Yia^ iYu,Y2t) and X ^ Y2a ^ iYu,Y2b) 

form two Markov chains. Then, any achievable rate triple 
(i?o, -Ri, i?2) must satisfy 



Rn 



< 



mm[I{U;Yu),I{U,Y2b)] 



(37) 



Ri < IiX;Y,a\U)-I{X;Y2b\U) 
i?2 < IiX;Y2a\U) ^ I{X;Yib\U) 

for some p{u, x), where U is an auxiliary random variable. 

The proof follows standard information-theoretic argument 
and is deferred to Appendix IB] 

Now, we can combine all previous three steps and obtain an 
upper bound on the weighted sum rate + (32) R^ + XiR\ + 
\2R\- By assumption, (i?Q, r\^r\) is an achievable rate triple 
for channel ( fTSl l. Then, following Lemma |3] we have 

{Pi+P2)RI + \iR\+\2RI 

< ^ log |2^e(S + Ni)| + ^ log |27re(S + Na)! 



No 



N 



+ y log 



Ni 



N 



+ ?7(Ai,A2) (38) 



where 



?7(Ai, A2) := Xih{X + Zia\U) + X2h{X + 7.2a\U) 

- (A2 + /3i)/^(X + ZiblL/) - (Ai + /32)/i(X + Z2b|C/). 

Note that ^ N ^ {Ni, N2}, ^ S, and B^Mq ^ 0. 
By lEl] Corollary 4] and we have 



r/(Ai, A2) < (Ai + A2) log 2^e(S - B5) 

-(A2+/3i)log|2^e(S 
-(Ai+/32)log|2^e(S 

Combining ( |38] | and ( [39] l. we have 

(/3i+/32)i?J + Aii?l +A2i?t 



N 



B^) 



Nil 
N2I 



(39) 




S + N, 



(S-B*) + N2 
(S-BS)+N2 




which is a contradiction to ( l36l ) as p > 0. We thus conclude 
that the rate region ( fT9] l over all possible Bq >r 0, Bi ^ and 
Bq + Bi ^ S is indeed the capacity region of the canonical 
MIMO Gaussian broadcast channel (fTsT l. This completes the 
proof of Theorem |2] 

Remark 4: Note that in the enhanced channel ( |32] |. both 
legitimate receivers la and 2a have the same noise covariance 
matrices. This fact greatly simplified the capacity analysis of 
the enhanced channel and is key to the success of the proposed 
channel enhancement approach. We mention here that the 
same technique was also used in 1241 to derive the sum-private- 
v.s. -common message capacity region of the MIMO Gaussian 
broadcast channel. 



IV. Concluding Remarks 

In this paper we have presented two new results on MIMO 
Gaussian broadcast channels with confidential messages, lead- 
ing to a more comprehensive understanding of the fundamental 
Umits of MIMO secret communication. 

First, a matrix characterization of the capacity-equivocation 
region of the MIMO Gaussian wiretap channel has been 
obtained, generalizing the previous results Q-Q which dealt 
only with the secrecy capacity of the channel. The result 
has been obtained via an interesting connection between the 
rate-equivocation setting and simultaneous private-confidential 
communication over a discrete memoryless wiretap channel, 
which allows a matrix characterization of the entire capacity- 
equivocation region based on the existing characterization of 
secrecy capacity for the MIMO Gaussian wiretap channel. 

Next, the problem of MIMO Gaussian wiretap channels with 
two receivers and three independent messages, a common mes- 
sage intended for both receivers, and two mutually confidential 
messages each intended for one of the receivers but needing to 
be kept asymptotically perfect secure from the other, has been 
considered. A precise characterization of the capacity region 
has been obtained via a channel-enhancement argument, which 
is a natural extension of the channel-enhancement arguments 
of El and El. 

Appendix A 
Proof of Lemma[T] 

We first prove the achievability part of the lemma by con- 
sidering a coding scheme that combines superposition coding, 
random binning, and rate splitting. Fix p{u)p{v\u)p{x\v) . Split 
the private message Wp into two independent submessages 
and W^'. 

Codebook generation. Fix 5 > Q. Randomly and indepen- 
dently generate 2"'-^p codewords of length n according 
to py. Label each of the codewords as u", where j is the 
codeword number We will refer to the codeword collection 
as the [/-codebook. 

For each codeword in the [/-codebook, randomly and 
independently generate 2"(^-"+^p+^^ codewords of length n 
according to nr=iP^^|c/=i»3[i]- Randomly partition the code- 
words into 2"^= bins so that each bin contains 2"'^p+^' 
codewords. Further partition each bin into 2"^p sub-bins so 
that each sub-bin contains 2"^ codewords. Label each of 
the codewords as w"^, ; ^ where k denotes the bin number, 
I denotes the sub-bin number within each bin, and t denotes 
the codeword number within each sub-bin. We will refer to 
the codeword collection {v'^^ ^ n]k.i.t as the F-subcodebook 
corresponding to w". Fig. |5] illustrates the overall codebook 
structure. 

Encoding. To send a message triple {ws,w'p, w^), the trans- 
mitter first chooses the codeword u^, from the U -codebook. 
Next, the transmitter looks into the V^-subcodebook corre- 
sponding to u^, and randomly (according to a uniform distri- 
bution) chooses a codeword w", , , ,,,, ^. from the w''th sub-bin 
of the Wsth bin. Once a v^, ,^ ^ is chosen, an input se- 
quence .t" is generated according to n"=i Px|v=t) / // [il 
and is then sent through the channel. 
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V-subcodebook 



U-codebook 



codeword 1 



codeword 2 



codeword j 



codeword 2"^p 



sub-bin 1 



sub-bin 2 



sub-bin 2"^<' 



sub-bin 1 
sub-bin 2 



sub-bin 2" 



bin 1 



bin 2" 



Fig. 5. Codebook stnicture. 



Decoding at receiver 1. Given y", receiver 1 looks into the 
codebooks U and V and searches for a pair of codewords 
(w", v"), I that are jointly typical with y". In the case when 

i?; < I{U;Y) (40) 
and Rs + B'^ + T < I{V;Y\U) (41) 

with high probability the transmitted codeword pair 
i'^w' ^'"w' .w,.w".t) is the only one that is jointly typical 
with ?/". 

Security at receivers 2 and 3. Fix e > 0. In the case when 



r; + t> I{V-Z\U) 
we have iflTl Theorem 1] 



(42) 



(43) 



for sufficiently large n. Since Ws and are independent, 
we have from ( |43] | that 

-I{Ws;Z'') < -I{Ws;Z^,w;) 
n n ^ 

= -I{Ws-,Z^\W') 
n ^ 

< e 

i.e., the message Ws is asymptotically perfectly secure at the 
eavesdropper 

To summarize, for any given p{u)p{v\u)p{x\v) and any 
T > 0, any rate triple {Rs,R'p,R'^) that satisfies 
is achievable. Note that 



Rp ~ R'p + Rp- 



(44) 



Eliminating T, i?2 and i?2 f^^m (|40ll-(|42]i and using 
Fourier-Motzkin elimination, we may conclude that any rate 
pair {Rs,Rp) satisfying (fT2l i is achievable. 

To prove the converse part of the lemma, we first consider an 
upper bound on the confidential message rate Rg. The perfect 



secrecy condition (fTTl i implies that for every e > 0, 

H{Ws\Z'')>H{Ws)~ne. (45) 

Ch. 2.11] implies 



On the other hand, Fano's inequality 
that for every eg > 0, 



(46) 



H{Ws,Wp\Y^) <eo\og 
:= nS. 

Applying (l45T l and ( |46] |. we have 

nRs = HiWs) 

< [H{Ws\Z") + ne] + [nS - H{Ws, WplY"-)] 

< H{Ws, Wp\Z") - H{Ws, W^p|r") + n{e + 6). (47) 

By the chain rule of the mutual information 1201 Ch. 2.5], 

n{Rs -e-S)< IiWs,Wp; F") - I{Ws,Wp; Z") 

n 

= Y,[l{Ws,Wp;Y\Y'-') 

i=l 

~I{Ws,Wp;Z,\Zl^,)] 

n 

= Y,[l{Ws,Wp-Y,\Y^-\Z^l^,) 

i=l 

-IiWs,Wp;Z,\Y'-\Zl\^)] (48) 
where the last equality follows from ifTTl Lemma 7]. Let 

[/, := and V, -.^ iWs,Wp,U,) (49) 

and we have from (l48T l that 

n 

n{Rs -e-5)<Y^ [I{V^■,Y,\U^) - I{V,- Z,\U,)] . (50) 



Next, we consider an upper bound on the sum private- 
confidential message rate Rg + Rp. By (|46] |. 

n{Rs + Rp)^HiWg,Wp) 

<I{Ws,Wp-Y'')-7iS. (51) 

Applying the chain rule of the mutual information 
Ch. 2.5], we have 



i=l 

n 
n 

= (52) 

i=l 

Applying the standard single-letterization procedure (e.g., see 
1201 Ch. 14.3]) to ( fSOl l and ( |52l i. we have the desired converse 
result for Lemma [T| 
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Appendix B 
Proof of Lemma[3] 



The perfect secrecy condition ( |28] l implies that for every 
e > 0, 



H{Wi\Y^l)>H{Wi)-ne 
and H{W2\Y;1) > H{W2) - ne. 



(53a) 
(53b) 



Substituting (|54bt into ( |59] l, we may obtain 

< H{Wi\Wq, Y^l) ~ H{Wi\Wo. Y^l) 
+ 7i(e + (5o + 

+ n{e + So + Si). (60) 
Applying ifTTl Lemma 7], ( |60] | can be rewritten as 



On the other hand, Fano's inequality i20l Chapter 2.11] implies 
that for every eq > 0, 

m!xx[HiWo\Y^l), HiWolY^l)] 

< eo log (2"^" - 1) + h{eo) := nSo (54a) 
H{W^\Y,l) 

< eo log (2"^i - 1) + h{eo) := nSi (54b) 

and H{W2\n:) 

< eo log (2"^^ - 1) + h{eo) := nS2. (54c) 



nRi <Y,[l{Wi;Y,aAWo,Yl~\Y,l,+,) 
1=1 

- I{Wi;Y2tMo, ?ia"\ i"2M+i)] + "(e + So + Si) 

n 

4=1 

- /(X,; Y2b,,\Wo,Yl-\Y^l^+,)] + n{e + 5o + <5i) 



(61) 



Let 



which satisfies the Markov chain 

U,^ X,^{Yia,Y2a,Yu,Y2b). 

We first bound Rq based on (I54al i as follows: 

nRo = H{Wo) 

<I{Wo;Yll)+n5o 



(55) 



(56) 



where ( |6T] i follows from the Markov chain 

Wl-^X,^Yla,^^Y2b,^. 

Moreover, due to the Markov chain 



we can further bound Ri as 

n 

nRi < J2[nX^■,Y,a,^\Wo,Y^-\Y^-\Y^l^^,) 

i=l 

- I{Xf, Y2,,.\Wo, Y^^\ Yl-\ Y^,^^^,)] 
+ n{e + 5Q + 5i) 

n 

= Y,[I{X,■Y,aAU^,na') 

1=1 

- I{X^; Y2bAU,, Y^-^)] + n{e + 5^ + 5i) (63) 

n 

= Y,[I{X,■YlaAU^) - I{X,;Y2bAUi)\ 

i=l 

- [l{Yl~'-Yr,AUr) - m:'-,Y2bAU,)\ 
+ n{e + 6Q + 5i) 



(62) 



= Y.I{Wo;YibAYl^^)+n5o 

n 

< ^ I{Wo,Y^^\Y,l,+,■,Y,l„^) + nSo 

2 = 1 

n 

= Y,HU^;Ylt,^)+nSo. (57) 



z=l 

Similarly, we have 

nRo<I{Wo;Y^'l)+nSo 



= Y.nWo■,Y2l>AY2l^+l)+n6o 

n 

< HWo,Yl-\Y,l^^,;Y2tA + nSo 

n 

= Y,HU^■,Y2b,^)+nSo. (58) 



< - IiX,;Y2bAU;)] 

1=1 

+ n{e + 5o + 5i) 



(64) 



Next, we bound Ri based on (I53ab and (I54bb as follows; 

nRi = if(VKi) 

< [iI(W^i \Y^) + ne] + [n6i - H{Wi\Yll,)] 

= H{Wi\Wo,Y^l) + I{W,;Wo\Y,l) ~ H{W,\Y{:^) 
+ n{e + Si) 

< H{Wi\Wo,Y^,) + HiWolY^'l) - H{W,\Wo, Y,l) 
+ n{e + di). (59) 



where ( |63l l follows from the definition of Ui in ( |55] l. and ( |64l ) 
follows from the fact that l26,j is degraded with respect to 

yia,, so /(Fi^-^ysMlc^O < HYia'-.YlaM)- 

Following the same steps as those in (|59]l-(l64]l, we may 
obtain 

n 
i=l 

- I{X,-YuAUi)] + n{e + So + S2). (65) 

Finally, applying the standard single-letterization procedure 
(e.g., see ||2U1 Chapter 14.3]) to (|5l, (|64| and ^ proves 
the desired result ( |37] | for Lemma [3j 
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